VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Core 2 45nm (1067a); 2009 Intel Core 2 Duo E7600; 2 x 3060MHz; wolfdale, supercop-20250415

[Page version: 20250506 12:43:01]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
10.5710.6410.65ascon128av12
15.1815.1815.19ascon128v12
15.3015.3115.31ascon80pqv12
19.9019.9019.91ascon128abi32v12
20.2720.3020.53T:aes128gcmv1
24.8324.8324.84T:xoodyakround3
24.9925.0825.16T:aes256gcmv1
29.0429.0629.06ascon128bi32v12
30.4430.4730.59T:schwaemm256128v2
40.4640.5040.71T:schwaemm256256v2
40.4640.6241.34T:schwaemm128128v2
40.5140.6441.03T:schwaemm192192v2
48.4648.8149.03romulusn
53.5653.6853.72T:giftcofb128v1
62.2162.2962.63T:grain128aeadv2
63.3663.5063.59T:isapa128av20
66.4166.8067.11T:isapa128v20
78.9078.9578.99T:tinyjambu128v2
79.4679.5179.63romulusm
95.5895.7095.71T:tinyjambu192v2
102.80102.93103.05T:tinyjambu256v2
153.37154.55155.16T!!!romulust
237.72237.73237.79T:isapk128av20
252.55253.64267.76T:elephant200v2
330.39330.74331.07T:isapk128v20
311.81?342.59?350.04?T:isapxv20
13015.9213060.7513077.08T:elephant176v2
14741.3014749.5314783.34T:elephant160v2
33896.2834021.0035355.84aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
10.2610.2810.29ascon128av12
15.1215.2115.48ascon80pqv12
15.2715.2815.28ascon128v12
20.3120.3720.41T:aes128gcmv1
20.6520.6620.67ascon128abi32v12
22.4722.7022.92T:xoodyakround3
24.7824.9024.94T:aes256gcmv1
29.1629.3429.35ascon128bi32v12
30.9730.9831.07T:schwaemm256128v2
40.5340.6241.54T:schwaemm128128v2
40.6740.7440.79T:schwaemm256256v2
40.4540.7541.02T:schwaemm192192v2
48.6948.7549.02romulusn
53.4753.9053.91T:giftcofb128v1
61.9962.1062.42T:grain128aeadv2
63.3863.4563.54T:isapa128av20
66.5066.7367.34T:isapa128v20
78.6978.7678.81T:tinyjambu128v2
79.6279.6979.78romulusm
94.5794.5994.73T:tinyjambu192v2
102.74102.76102.92T:tinyjambu256v2
153.83154.44155.00T!!!romulust
237.72237.73238.21T:isapk128av20
252.57253.71267.75T:elephant200v2
330.69330.81331.10T:isapk128v20
311.72?342.21?349.61?T:isapxv20
13015.5913060.5513076.95T:elephant176v2
14743.5414749.6014772.11T:elephant160v2
33859.0734031.1835780.02aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
10.2710.2910.32ascon128av12
15.1215.2115.48ascon80pqv12
15.2815.2815.28ascon128v12
20.2920.3420.39T:aes128gcmv1
20.4620.6220.64ascon128abi32v12
22.7022.9522.99T:xoodyakround3
24.7824.8724.95T:aes256gcmv1
29.3429.3729.37ascon128bi32v12
30.8830.9831.02T:schwaemm256128v2
33.7033.7433.74T:isapa128v20
40.6340.7441.20T:schwaemm192192v2
40.7540.7940.81T:schwaemm256256v2
40.5340.9841.53T:schwaemm128128v2
41.5441.5641.71T:isapa128av20
48.7148.7549.02romulusn
53.4753.9053.90T:giftcofb128v1
53.5654.0154.96T!!!romulust
61.7562.0262.42T:grain128aeadv2
78.7178.7678.81T:tinyjambu128v2
79.6379.6979.80romulusm
94.5794.5994.79T:tinyjambu192v2
102.73102.85102.93T:tinyjambu256v2
162.53162.55162.70T:isapk128av20
192.40192.41192.43T:isapk128v20
182.43?202.73?212.59?T:isapxv20
252.57253.78267.75T:elephant200v2
723.00?861.83?2645.67?aes256gcmv1
13016.0213060.7213077.31T:elephant176v2
14742.6914750.6414770.17T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
10.3310.3410.36ascon128av12
14.1714.1914.33T:aes128gcmv1
15.1115.1215.12ascon128v12
15.1915.1915.19ascon80pqv12
16.5316.5716.61T:aes256gcmv1
17.7317.7617.77T:xoodyakround3
19.6719.6919.73ascon128abi32v12
29.1829.1929.20ascon128bi32v12
30.4630.5530.63T:schwaemm256128v2
39.7439.7839.80romulusn
40.4840.5740.81T:schwaemm256256v2
40.5840.7440.84T:schwaemm192192v2
40.6740.8740.93T:schwaemm128128v2
50.1150.1950.30T:isapa128v20
52.5952.6352.65T:isapa128av20
53.2053.2453.31T:giftcofb128v1
55.1555.2155.25romulusm
61.8061.8861.94T:grain128aeadv2
64.6164.6464.66T:tinyjambu128v2
74.6274.8575.27T:tinyjambu192v2
78.2078.3478.41T:tinyjambu256v2
103.36103.98104.43T!!!romulust
189.68190.76201.06T:elephant200v2
201.53201.59201.97T:isapk128av20
262.03262.08262.31T:isapk128v20
253.79267.50281.32T:isapxv20
9721.289763.799772.44T:elephant176v2
11060.5411066.0011111.65T:elephant160v2
17326.9517432.7618822.84aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
10.1910.2010.23ascon128av12
14.1914.2114.23T:aes128gcmv1
15.0615.0615.06ascon80pqv12
15.2415.2415.24ascon128v12
16.4416.4716.50T:aes256gcmv1
16.5916.6116.63T:xoodyakround3
20.0520.0520.06ascon128abi32v12
29.1129.1229.24ascon128bi32v12
30.3730.5230.66T:schwaemm256128v2
39.5939.7439.77romulusn
40.3640.5240.72T:schwaemm192192v2
40.6040.6540.94T:schwaemm256256v2
40.4140.7241.02T:schwaemm128128v2
50.1050.2650.48T:isapa128v20
52.5652.6552.69T:isapa128av20
53.0653.1753.35T:giftcofb128v1
55.1855.2055.24romulusm
61.6061.7261.87T:grain128aeadv2
64.2964.3364.45T:tinyjambu128v2
74.4574.4774.50T:tinyjambu192v2
78.0878.2178.29T:tinyjambu256v2
103.40103.92104.33T!!!romulust
189.66190.72201.01T:elephant200v2
201.55201.59201.72T:isapk128av20
262.07262.18262.26T:isapk128v20
253.81267.18281.39T:isapxv20
9722.049763.269772.70T:elephant176v2
11060.5211064.7111112.57T:elephant160v2
17305.66?17421.55?19242.72?aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
10.1910.2110.23ascon128av12
14.1814.2114.26T:aes128gcmv1
15.0615.0615.08ascon80pqv12
15.2415.2415.29ascon128v12
16.4216.4716.49T:aes256gcmv1
16.6016.6616.66T:xoodyakround3
20.0020.1620.19ascon128abi32v12
29.1329.3629.53ascon128bi32v12
30.2730.5030.68T:schwaemm256128v2
33.7033.7033.70T:isapa128v20
39.7339.7439.83romulusn
40.4040.5040.70T:schwaemm192192v2
40.6040.7140.90T:schwaemm256256v2
40.4240.7140.80T:schwaemm128128v2
41.6241.7141.72T:isapa128av20
53.0953.1253.36T:giftcofb128v1
53.7753.8354.33T!!!romulust
55.1855.1955.25romulusm
61.6361.6961.79T:grain128aeadv2
64.3064.3364.47T:tinyjambu128v2
74.4674.4674.48T:tinyjambu192v2
78.0878.2278.29T:tinyjambu256v2
163.92164.00164.04T:isapk128av20
189.66190.74201.00T:elephant200v2
192.90192.94193.12T:isapk128v20
189.06?197.78?212.45?T:isapxv20
737.44?862.22?2669.48?aes256gcmv1
9721.449767.699772.39T:elephant176v2
11060.0211064.9911111.39T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
8.038.078.13T:aes256gcmv1
8.068.088.11T:aes128gcmv1
10.0810.0910.12ascon128av12
10.6610.7010.72T:xoodyakround3
15.0215.0315.03ascon128v12
15.0615.0715.07ascon80pqv12
19.4319.4819.73ascon128abi32v12
29.3129.3329.33ascon128bi32v12
30.3830.4330.51T:schwaemm256128v2
30.5530.5630.65romulusn
30.8030.8030.84romulusm
33.4233.6533.92T:isapa128v20
40.3740.4040.43T:schwaemm256256v2
40.3640.5640.75T:schwaemm192192v2
39.6440.7941.02T:schwaemm128128v2
41.8041.8041.86T:isapa128av20
50.3450.3450.35T:tinyjambu128v2
52.7452.7852.81T:giftcofb128v1
53.6453.7654.20T!!!romulust
53.7953.8753.90T:tinyjambu256v2
53.6353.8754.87T:tinyjambu192v2
61.3061.4061.53T:grain128aeadv2
127.76128.35135.68T:elephant200v2
165.37165.42165.46T:isapk128av20
193.41193.42193.43T:isapk128v20
184.58?203.22?213.41?T:isapxv20
758.99?857.33?2221.44?aes256gcmv1
6428.626450.096459.40T:elephant176v2
7365.457372.127395.71T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
8.078.078.08T:aes128gcmv1
8.078.088.12T:aes256gcmv1
10.0910.1110.18ascon128av12
10.6110.6610.67T:xoodyakround3
15.0215.0215.02ascon80pqv12
15.1115.1115.11ascon128v12
19.4019.4219.49ascon128abi32v12
28.9028.9128.91ascon128bi32v12
30.2730.4130.44T:schwaemm256128v2
30.6830.6930.69romulusn
30.8030.8330.85romulusm
33.5033.5033.78T:isapa128v20
40.0140.2840.71T:schwaemm192192v2
40.3840.4040.49T:schwaemm256256v2
40.6240.8440.98T:schwaemm128128v2
41.7741.8141.83T:isapa128av20
49.8049.8249.89T:tinyjambu128v2
52.7552.7852.79T:giftcofb128v1
53.5753.6353.66T:tinyjambu256v2
53.7253.8254.30T!!!romulust
54.3454.3754.42T:tinyjambu192v2
60.8761.0161.34T:grain128aeadv2
127.71128.83135.64T:elephant200v2
164.37165.39165.50T:isapk128av20
193.38193.42193.85T:isapk128v20
184.21?203.24?213.39?T:isapxv20
726.46?860.43?2648.17?aes256gcmv1
6428.476449.896459.49T:elephant176v2
7366.717369.757388.93T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
8.068.078.09T:aes128gcmv1
8.078.108.13T:aes256gcmv1
10.0910.1210.18ascon128av12
10.5810.6610.69T:xoodyakround3
15.0215.0215.02ascon80pqv12
15.1115.1115.11ascon128v12
19.4019.4219.44ascon128abi32v12
28.9128.9329.04ascon128bi32v12
30.2930.4030.47T:schwaemm256128v2
30.6830.6930.69romulusn
30.8030.8230.84romulusm
33.6433.6533.85T:isapa128v20
40.3840.4040.43T:schwaemm256256v2
40.0640.5340.81T:schwaemm192192v2
40.6440.8641.17T:schwaemm128128v2
41.7741.8141.85T:isapa128av20
49.7949.8949.89T:tinyjambu128v2
52.7552.7853.37T:giftcofb128v1
53.6153.6553.67T:tinyjambu256v2
53.7353.8253.98T!!!romulust
54.3454.3954.43T:tinyjambu192v2
60.7660.9561.06T:grain128aeadv2
127.71128.82135.64T:elephant200v2
164.37165.42165.49T:isapk128av20
193.39193.43193.78T:isapk128v20
184.59?203.22?213.39?T:isapxv20
726.65?859.30?2648.18?aes256gcmv1
6428.596449.566459.34T:elephant176v2
7365.227369.357394.68T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
10.5810.5910.59ascon128av12
15.0915.1215.20T:aes128gcmv1
15.3315.3315.33ascon128v12
15.4115.4115.42ascon80pqv12
17.5117.5317.62T:aes256gcmv1
17.9217.9417.95T:xoodyakround3
20.1320.1420.22ascon128abi32v12
29.6429.6429.64ascon128bi32v12
31.5231.5431.61T:schwaemm256128v2
39.9940.1440.16romulusn
41.2841.4641.55T:schwaemm128128v2
41.6341.6541.79T:schwaemm192192v2
41.7641.7941.85T:schwaemm256256v2
53.7653.8253.84T:giftcofb128v1
55.5655.5855.66romulusm
56.6456.9056.95T:isapa128av20
62.2462.2862.52T:grain128aeadv2
65.1565.1865.33T:tinyjambu128v2
73.4473.5473.60T:isapa128v20
75.2275.3075.52T:tinyjambu192v2
78.7578.9278.98T:tinyjambu256v2
105.54105.82106.58T!!!romulust
194.46194.47204.45T:elephant200v2
227.42227.45227.99T:isapk128av20
433.93433.96434.16T:isapk128v20
436.00443.88452.60T:isapxv20
9800.899829.729843.72T:elephant176v2
11187.1111189.1711234.12T:elephant160v2
17766.8417768.5119053.42aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
10.4410.4410.44ascon128av12
15.0715.0915.09T:aes128gcmv1
15.3215.3215.32ascon80pqv12
15.4415.4415.48ascon128v12
16.7716.7716.94T:xoodyakround3
17.3817.4017.42T:aes256gcmv1
20.4620.4820.48ascon128abi32v12
29.5929.5929.70ascon128bi32v12
31.4431.4631.73T:schwaemm256128v2
40.1540.2340.23romulusn
41.1941.3741.58T:schwaemm128128v2
41.4541.5441.67T:schwaemm192192v2
41.8541.8841.90T:schwaemm256256v2
53.6253.6853.89T:giftcofb128v1
55.6855.7255.72romulusm
56.6156.6656.75T:isapa128av20
61.9862.0862.35T:grain128aeadv2
64.7864.9265.15T:tinyjambu128v2
73.4073.5073.61T:isapa128v20
75.0775.1175.17T:tinyjambu192v2
78.8178.8878.89T:tinyjambu256v2
105.24105.55106.12T!!!romulust
194.45194.76204.39T:elephant200v2
227.43227.46227.72T:isapk128av20
433.95433.97434.18T:isapk128v20
436.07443.67452.61T:isapxv20
9800.629829.629843.68T:elephant176v2
11187.7611190.2511232.88T:elephant160v2
17763.3517773.1219451.99aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
10.4310.4410.44ascon128av12
15.0715.0915.11T:aes128gcmv1
15.3215.3215.32ascon80pqv12
15.4415.4415.44ascon128v12
16.8116.8216.83T:xoodyakround3
17.4117.4217.44T:aes256gcmv1
20.4520.5820.61ascon128abi32v12
29.5929.5929.60ascon128bi32v12
31.4331.4531.52T:schwaemm256128v2
40.2040.2340.45romulusn
41.0641.4241.59T:schwaemm128128v2
41.4541.5041.62T:schwaemm192192v2
41.8641.8741.91T:schwaemm256256v2
43.9243.9644.04T:isapa128av20
45.5145.5145.52T:isapa128v20
53.6253.6753.87T:giftcofb128v1
55.4155.5055.61T!!!romulust
55.7155.7155.72romulusm
61.9862.0562.20T:grain128aeadv2
64.7364.9665.15T:tinyjambu128v2
75.0775.1475.26T:tinyjambu192v2
78.8178.8378.88T:tinyjambu256v2
180.17180.20180.42T:isapk128av20
194.45194.88204.40T:elephant200v2
280.83280.85281.08T:isapk128v20
282.38288.58299.72T:isapxv20
1196.21?1205.15?2887.04?aes256gcmv1
9800.999829.759843.54T:elephant176v2
11188.6411191.3711235.61T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
15.7916.0416.25ascon128av12
20.2320.2720.55ascon128v12
20.4220.4220.42ascon80pqv12
26.7226.7427.09T:xoodyakround3
30.0230.2330.61ascon128abi32v12
35.4835.5536.16T:aes128gcmv1
39.2439.4140.59T:aes256gcmv1
39.8739.8740.13ascon128bi32v12
48.7648.9449.09romulusn
54.8455.1355.38T:schwaemm256128v2
54.3255.7957.30T:schwaemm128128v2
64.7764.8865.62romulusm
65.7065.9666.20T:giftcofb128v1
69.6469.8870.25T:schwaemm256256v2
70.6971.2071.45T:grain128aeadv2
71.2871.4571.79T:schwaemm192192v2
77.1377.1377.64T:tinyjambu128v2
87.6887.7788.14T:tinyjambu192v2
93.0193.0193.22T:tinyjambu256v2
144.29144.82146.55T!!!romulust
149.31149.31150.10T:isapa128av20
275.19276.09288.38T:elephant200v2
609.63609.63609.75T:isapa128v20
780.28780.29781.16T:isapk128av20
4335.894336.484337.18T:isapk128v20
4344.774367.284650.69T:isapxv20
12240.5012242.5112327.89T:elephant176v2
14977.9215018.3815037.77T:elephant160v2
25817.8925822.3627240.84aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.8816.0316.09ascon128av12
20.3420.3420.80ascon128v12
20.3520.3520.55ascon80pqv12
25.6925.7825.86T:xoodyakround3
30.4830.7030.78ascon128abi32v12
34.8034.8436.02T:aes128gcmv1
38.7938.9240.22T:aes256gcmv1
40.1140.2240.30ascon128bi32v12
48.8348.9549.20romulusn
53.7454.3855.50T:schwaemm128128v2
54.6955.0455.25T:schwaemm256128v2
65.9666.1066.20T:giftcofb128v1
66.7066.8867.07romulusm
69.7669.8469.88T:schwaemm256256v2
70.4770.4770.76T:grain128aeadv2
71.0371.3671.72T:schwaemm192192v2
77.3477.3477.89T:tinyjambu128v2
88.6188.7089.14T:tinyjambu192v2
92.3892.5293.06T:tinyjambu256v2
144.41144.81145.17T!!!romulust
149.91149.91150.27T:isapa128av20
275.32275.72288.51T:elephant200v2
607.38609.42611.99T:isapa128v20
780.56780.57781.14T:isapk128av20
4336.384336.804337.15T:isapk128v20
4345.554367.564650.97T:isapxv20
12240.4212248.7512327.89T:elephant176v2
14997.9415016.2715034.60T:elephant160v2
25816.3425830.6327686.11aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
15.8815.9216.03ascon128av12
20.3420.3420.34ascon128v12
20.3520.3520.35ascon80pqv12
25.6625.8025.92T:xoodyakround3
30.5330.5330.57ascon128abi32v12
34.8434.8935.52T:aes128gcmv1
38.7738.8839.44T:aes256gcmv1
40.1340.1340.21ascon128bi32v12
48.7548.9149.11romulusn
54.2154.5556.20T:schwaemm128128v2
54.9955.3155.47T:schwaemm256128v2
65.9566.1566.32T:giftcofb128v1
66.6666.8166.96romulusm
69.7969.8169.86T:schwaemm256256v2
70.4770.4770.47T:grain128aeadv2
71.2171.2971.82T:schwaemm192192v2
77.3477.3477.34T:tinyjambu128v2
88.4388.6188.70T:tinyjambu192v2
91.8592.0992.41T!!!romulust
92.2392.3892.52T:tinyjambu256v2
96.2896.2896.29T:isapa128av20
275.33275.47288.52T:elephant200v2
316.77316.77316.77T:isapa128v20
518.34518.62519.01T:isapk128av20
2264.912264.912265.09T:isapk128v20
2275.722293.612425.43T:isapxv20
9245.49?9265.48?11121.03?aes256gcmv1
12237.1712240.7212327.35T:elephant176v2
14975.7415021.0115049.73T:elephant160v2